BPJS Kesehatan DEFRADA ML Fraud Detection in Healthcare Claims (Indonesia)

Overview

BPJS Kesehatan (Badan Penyelenggara Jaminan Sosial Kesehatan), Indonesia's national health insurance administering body, operates DEFRADA (Deteksi Potensi Fraud Dengan Analisa Data Klaim), a machine learning-based fraud detection system designed to identify potentially fraudulent hospital claims submitted under the Jaminan Kesehatan Nasional (JKN) programme. The JKN programme, launched in 2014, is the world's largest single-payer health insurance scheme, covering approximately 270 million participants across Indonesia. DEFRADA was developed in-house by BPJS Kesehatan to address a critical gap: as the JKN programme scaled rapidly, few fraud detection tools existed for the Indonesia-Case Based Group (INA-CBG) case-mix system used to reimburse referral health services, and by the end of 2017 the system was processing over 80.6 million claims submissions annually (ISSA, gp/173411).

DEFRADA analyses structured claims data submitted by hospitals through the INA-CBG case-mix billing system, using data analytics and machine learning algorithms to identify patterns consistent with fraudulent, abusive, or erroneous billing. The system flags claims exhibiting anomalous patterns — such as upcoding of procedures, phantom billing for services not rendered, and manipulation of diagnostic or procedural codes — for human review before reimbursement is authorised. Common fraud patterns detected have evolved over time: in 2023, phantom billing accounted for approximately 40 percent of total fraud cases; in 2024, manipulation of medical procedures (particularly hemophilia therapy claims) represented 52 percent; and in 2025, manipulation of ventilator procedures accounted for 59 percent of cases, with investigations revealing that ICU ventilator claims frequently involved only nasal cannulas or oxygen masks (Kompas, 2025).

The machine learning component of BPJS Kesehatan's fraud detection infrastructure was formally introduced in 2020, building upon an earlier data analytics tool called PIN-F that had been operational since 2014 for automated claims scanning. The ML model was iteratively implemented with a phased scaling approach: beginning with 10 hospitals in 2019, extending to 265 hospitals in 2020, and scaling up to 2,511 hospitals in 2021. By 2021, the artificial intelligence engine screened 5.8 million transactional claims from hospitals, flagging approximately 390,000 transactions for additional review by BPJS Kesehatan verification teams (ISSA, 2022). The system operates within BPJS Kesehatan's Vedika (Verifikasi Digital Klaim) digital claims verification platform, where AI-generated flags inform but do not determine final payment decisions. Flagged claims are reviewed by provincial teams of medical experts who assess clinical necessity and determine whether reimbursement should proceed, be adjusted, or be denied.

BPJS Kesehatan has also deployed biometric authentication (fingerprint scanning) as a complementary fraud prevention measure to verify patient identity at the point of service, ensuring that claims correspond to legitimate patient encounters. The combination of biometric verification at the front end and ML-based claims analytics at the back end creates a layered fraud prevention architecture. Director of Information Technology Wahyuddin Bagenda described the system as performing filtration on claims to produce those eligible for payment, with machine learning studying patterns in submitted claims to minimise fraud potential (ANTARA News, 2020).

In 2017, DEFRADA contributed to cost efficiency gains of approximately 25-30 percent of total efficiency improvements for the JKN programme (ISSA, gp/173411). In 2019, BPJS Kesehatan reported preventing approximately Rp 10.5 trillion (approximately USD 740 million) in fraudulent claims, though actual confirmed fraud cases represented approximately 1 percent of the total programme budget (ANTARA News, 2020). The system's enforcement outcomes have included termination of cooperation agreements with 32 health facilities (26 advanced-level and 6 primary-level) found to have engaged in fraudulent billing practices (Kompas, 2025).

DEFRADA received the ISSA Good Practice Award in 2018 in the Information and Communication Technology category, recognising its innovation in healthcare fraud detection for social security systems. BPJS Kesehatan subsequently won the highest ISSA Good Practice Award for Asia and the Pacific in 2021, with the broader digital transformation programme — including AI-based fraud detection — cited as a contributing factor. The organisation was further recognised at the 17th ISSA International Conference on ICT held in Bali in 2024, where its AI implementations were presented as best practice in social security management.

The regulatory framework governing data protection in Indonesia relevant to this system includes Government Regulation No. 71 of 2019 on Electronic Systems and Transactions and the Personal Data Protection Law (UU PDP) No. 27 of 2022. BPJS Kesehatan's infrastructure processes approximately 1 million transactions daily and is connected to over 23,000 primary healthcare facilities, approximately 3,000 advanced healthcare facilities, and more than 950,000 payment channels across Indonesia. The organisation is also integrated with 15 ministries and institutions, handling over 100 million data flows and transactions daily (Jakarta Post, 2024).

Classification

Programme Details

Indonesia's Jaminan Kesehatan Nasional (JKN) is the world's largest single-payer national health insurance scheme, covering approximately 270 million participants. Administered by BPJS Kesehatan, the programme reimburses healthcare services through the INA-CBG case-mix system. DEFRADA operates within the Vedika digital claims verification platform, using machine learning to screen hospital claims for potential fraud before reimbursement authorisation.

Implementation Details

Risk & Oversight

Deployment & Outcomes

Sources

1. SRC-002-IDN-001 ANTARA News (2020). 'BPJS Kesehatan gunakan biometrik dan machine learning cegah fraud', ANTARA News, 21 July. Available at: https://www.antaranews.com/berita/1582942/bpjs-kesehatan-gunakan-biometrik-dan-machine-learning-cegah-fraud (Accessed 26 Mar 2026).
   https://www.antaranews.com/berita/1582942/bpjs-kesehatan-gunakan-biometrik-dan-machine-learning-cegah-fraud
2. SRC-001-IDN-001 International Social Security Association (2018). 'DEFRADA (Deteksi Potensi Fraud Dengan Analista Data Klaim): The development of a fraud detection tool in hospital services', ISSA Good Practice gp/173411. Geneva: ISSA. Available at: https://ww1.issa.int/gp/173411 (Accessed 26 Mar 2026).
   https://ww1.issa.int/gp/173411
3. SRC-005-IDN-001 Kompas (2025). 'BPJS Kesehatan Ends Partnerships with 32 Health Facilities to Deter Fraud', Kompas.id. Available at: https://www.kompas.id/artikel/en-berikan-efek-jera-akibat-fraud-bpjs-kesehatan-putus-kerjasama-dengan-32-faskes (Accessed 26 Mar 2026).
   https://www.kompas.id/artikel/en-berikan-efek-jera-akibat-fraud-bpjs-kesehatan-putus-kerjasama-dengan-32-faskes
4. SRC-004-IDN-001 The Jakarta Post (2016). 'BPJS Kesehatan has app to track hospital fraud', The Jakarta Post, 26 August. Available at: https://www.thejakartapost.com/news/2016/08/26/bpjs-kesehatan-has-app-to-track-hospital-fraud.html (Accessed 26 Mar 2026).
   https://www.thejakartapost.com/news/2016/08/26/bpjs-kesehatan-has-app-to-track-hospital-fraud.html
5. SRC-003-IDN-001 The Jakarta Post (2024). 'BPJS Kesehatan recognized as best practice of world social security', The Jakarta Post, 6 March. Available at: https://www.thejakartapost.com/front-row/2024/03/06/bpjs-kesehatan-recognized-as-best-practice-of-world-social-security.html (Accessed 26 Mar 2026).
   https://www.thejakartapost.com/front-row/2024/03/06/bpjs-kesehatan-recognized-as-best-practice-of-world-social-security.html